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ABSTRACT 

Compact  testing  uses  random  inputs  to  test  digital  circuits.  Detection 
is  achieved  by  comparison  between  some  statistic  property  of  the  circuit  under 
test,  like  the  frequency  of  ones  on  the  output  line,  and  the  same  property 
for  the  fault-free  circuit.  In  this  paper  we  show  that  compact  testing  can 
be  efficiently  used  for  sequential  machines,  although  it  has  some  inherent 
limitations.  Synchronization  is  achieved  by  a long  sequence  of  random 
inputs  whose  length  is  circuit  dependent.  However,  for  most  sequential 
circuits  synchronization  can  be  achieved  in  a few  seconds.  The  great  majority 
of  failures  inside  the  memory  elements  are  easily  detected,  even  with  short 
tests.  Compact  testing  also  detects  most  of  the  failures  in  the  combinational 
parts.  There,  its  efficiency  is  largely  dependent  upon  the  test  length  and 
also  the  characteristics  of  the  random  number  generators.  However,  even  the 
most  subtle  failures  may  be  detected  if  the  test  has  sufficient  length. 

Some  of  the  requirements  and  trade-offs  to  achieve  efficient  detection  are 
presented. 

Index  Terms:  Sequential  circuits,  testing,  random  inputs,  synchronization. 


failures,  detection. 


I.  INTRODUCTION 


The  ever  increasing  complexity  of  digital  circuits  has  made  the 
testing  problem  extremely  difficult.  The  deterministic  methods  for  test 
generation  (D.  Algorithm,  [J.P.  Roth,  1967],  [W.G.  Bouricius,  1971]; 
Boolean  Difference,  [F.F.  Sellers,  1968];  Poage's  Method,  lO.P.  Poage, 
1964];  etc.)  become  prohibitively  expensive  for  large  circuits.  The 
number  of  stuck-at  faults  increases  exponentially  with  the  number  of 
gates.  For  large  LSI  chips,  like  microprocessors,  the  amount  of  computa- 
tion required  to  generate  u vector  test  set  that  covers  all  single  stuck- 
at  and  some  multiple  faults  is  extremely  large.  Furthermore,  LSI  fail- 
ure modes  may  not  conform  to  the  stuck-at  model  and  such  failures  as 
pattern-sensitive  failures  may  not  be  covered  by  the  test  obtained. 

Random  test  generation  methods  [M.A.  Breuer,  1971],  [J.C.  Rault, 
1971],  [V.D.  Agrawal , 1972]  and  [P.  Agrawal  , 1975]  are  used  to  overcome 
some  of  the  computation  costs  of  the  deterministic  methods.  Random  input 
patterns  are  fed  to  a prototype  of  the  circuit  to  test  (or  a simulator) 
and  are  analysed  for  their  ability  to  catch  failures.  These  methods  give, 
in  general,  far  larger  test  sets.  However,  there  have  been  some  studies 
to  try  to  optimize  them  (by  assigning  different  weights  to  the  input  leads 
[M.D.  Schnwinmann,  1975]  or  by  interactive  use  [K.P.  Parker,  1976]). 

Some  testing  methods  bypass  the  need  for  any  prior  test  generation. 
Quite  often,  testing  is  economically  achieved  by  comparing  the  outputs 
of  the  unit  under  test  with  the  outputs  of  a known  good  unit  (also  called 
"gold  unit")  while  both  units  are  fed  by  the  same  sequence  of  random 
inputs.  The  efficiency  of  such  testing  methods  has  been  analysed  by 
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[J.J.  Shedlestky,  1975].  However,  the  need  for  a gold  unit  may  be 
bothersome  (large  or  expensive  gold  unit).  Moreover,  the  reliability 
of  the  gold  unit  is  not  guaranteed  and  the  synchronization  of  the  two 
units  may  also  cause  problems. 

Recently,  a new  testing  method,  which  also  does  not  necessitate 
prior  test  set  generation,  has  been  implemented  in  some  test  equipments. 

The  unit  under  test  is  fed  by  random  or  pseudo -random  inputs,  and  some 
statistics  of  the  outputs  (for  example,  the  number  of  logic  ones  or  transi- 
tions) are  computed.  If  the  output  statistics  satisfy  some  known  proper- 
ties (for  example,  a given  frequency  of  ones),  the  unit  is  said  to  have 
passed  the  test.  We  will  refer  to  such  testing  methods  as  compact  testing. 

An  example  of  commercial  testers  implementing  this  method  is  the  Fluke 
Trendar  1000  Logictester.  Such  a method  has  been  investigated  by  [J.P. 

Hayes,  1975],  [J.P.  Hayes,  1976]  and  [K.P.  Parker,  1976].  Its  general 
efficiency,  when  applied  to  combinational  circuits,  has  been  investigated 
by  [J.  Losq,  1976].  The  goal  of  this  paper  is  to  obtain  quantitative 
measures  for  the  efficiency  of  compact  testing  applied  to  sequential 
ci  rcui ts . 
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II.  TEST  DESCRIPTION 


La 


Compact  testing  of  sequential  circuits  is  achieved  in  three  steps. 

The  first  part  of  the  experiment  consists  in  feeding  the  circuit  a long 
sequence  of  random  inputs.  The  rationale  for  this  is  to  try  to  synchronize 
the  circuit.  The  next  step  consists  in  sending  another  long  sequence  of 
random  inputs  during  which  output  statistics  are  gathered.  The  third  step 
is  the  comparison  between  the  obtained  statistics  and  the  correct  ones. 

The  circuit  is  then  declared  fault-free  if  the  statistics  match.  For  this 
study,  one  will  assume  that  the  output  statistics  that  are  gathered  during 
the  second  step  of  the  experiment  are  the  frequencies  of  logic  ones  on 
each  output  line.  The  study  by  [J.P.  Hayes,  1976]  tends  to  conclude  that 
it  is  the  best  statistic.  Figure  1 gives  the  general  description  of  com- 
pact testing. 

The  length  of  the  input  sequence  during  the  first  step  of  the  experi- 
ment (the  synchronization  step)  will  be  denoted  by  Tq.  Similarly,  the 
length  of  the  sequence  during  the  statistic  gathering  step  will  be  de- 

I 

noted  by  T.  | 

I 

The  circuit  under  test  is  a sequential  machine,  M,  characterized  by  t 

its  five  t-uple  [E.J.  McCluskey,  1965],  [M.A.  Arbid,  1969]:  | 

I 

M = <I,0,Q,6,X>  -I 


with  I = input  alphabet, 

0 = output  alphabet, 
Q = state  set. 
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6 = Q * I — Q = state  transition  function, 

X = Q * I — 0 = output  function  in  Mealy-type  machines, 

Q — 0 = output  function  in  Moore-type  machines. 

In  the  following  we  will  adopt  the  following  conventions: 

- The  machine  has  n binary  input  variables:  Xj,  X2,  ...,  X^, 

- All  the  2”  possible  input  vectors,  Ao,  Ai,  ...,  A 

n 

2 -1 

accepted  by  the  machine, 

- The  machine  has  m binary  output  variables,  Zj,  Z2,  ...,  Z^^, 

- The  2"’  output  vectors  are  denoted  by  Bq,  Bi,  B 

m 

2 -1 

- The  machine,  when  it  is  fault  free,  has  q states,  Qi,  Q2,  ..., 

- The  machine  is  a Mealy- type  machine  (Moore-type  machines  are 
special  case  of  Mealy-type  machines). 

Mathematically,  one  has  the  following  relations: 

M = <1,0,  Q,6,X>  . 

, . X..  . I''-''-  . 


0 = Zi  * Zj^-'-xZi^ 


Bo,  B 1 , . . . , B I ^ 


Q”|Qi,Q2»  , 

Xj,  X^,  ...,  X^,  Zj,  Zj,  . ..,  = |0,1}  , 
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corresponds  to  the  input  vector  for  which  <Xi,  X2 X^> 

is  the  binary  representation  of  i. 

The  random  vector  generator  that  drives  the  circuit  under  test  (cf. 

Figure  1)  produces  random  inputs.  It  is  stationary  and  characterized  by 
the  probabilities,  , that  the  logic  value  on  line  X^  is  a one.  So, 

one  can  easily  obtain  the  set  of  probabilities,  a^. 's,  of  all  possible 
input  vectors,  [K.P.  Parker,  1976].  For  clarity,  we  will  use  vector  notation: 


with  a^.  = Prob  (input  vector  A^. ) . 

The  strategy  for  deciding  the  "health"  of  the  device  under  test  is 
simply  to  compare  the  number  of  ones  counted  during  the  second  step  of 
the  experiment  with  the  correct  number  for  every  output  line. 

If  the  random  number  generator  is  reset  at  the  beginning  of  each  test 
experiment,  it  will  always  produce  the  same  sequence  of  test  vectors. 
This  allows  exact  comparison.  Any  discrepency  between  the  observed 
statistic  and  the  correct  one  indicates  the  presence  of  a fault  or  an 
improper  synchronization.  If  the  random  number  generator  is  not  reset, 
then  it  is  not  possible  to  guarantee  that  two  identical  circuits  produce 
exactly  the  same  number  of  ones  on  each  of  their  outputs  (because  of  the 
different  test  sequences).  However,  as  it  will  be  seen  later,  two 
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identical  circuits,  whatever  their  initial  state,  will  still  produce 
about  the  same  number  of  ones.  So,  the  criteria  for  a circuit  to  pass 
the  test  is  that,  for  every  output  line  Z^. , the  observed  frequency  of 

logic  ones,  z.,  does  not  differ  more  than  e^-  from  the  correct  value  . 

11^ 

Circuit  passes  tests  iff  ||  z^  - zJ  < e. 

-*•  111 

The  vector  z of  the  output  probabilities  z^  is  called  the  signature 
of  the  circuit  under  test  while  the  vector  z of  the  correct  output  proba- 
bilities z^  is  called  the  correct  signature  (or  reference  signature). 


III.  SYNCHRONIZATION 

One  of  the  problems  in  testing  sequential  circuits  is  synchronization. 
When  exercized,  the  responses  of  sequential  machines  are  dependent  upon 
their  initial  states.  Deterministic  test  set  generation  methods  use  syn- 
chronizing sequences  (or  homing  sequences)  to  preset  the  circuit  under 
test  in  a known  state  (or  to  determine  the  initial  state)  [R.  Boute,  1972]. 
Compact  testing  uses  a similar  approach.  A long  series  of  random  in- 
puts is  injected  to  the  circuit  to  achieve  a probabilistic  synchronization. 
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With  such  a notation,  the  probabilistic  state  after  the  t^  input. 


t 

i 


I 


k 


tS.  is 

= oS  • n"" 

* 

where  qS  is  the  probabilistic  state  at  the  start  of  the  test. 


If  the  machine  under  test  is  strongly  connected  (which  is  to  say 
that  from  every  state  it  is  possible  to  reach  any  other  state),  then  the 
matrix  N corresponds  to  the  matrix  of  an  ergodic  Markov  chain  [T.L.  Booth, 
1967].  Thus,  the  probabilistic  state,  , approaches  a constant  value, 
w,  as  the  length  of  test,  t,  increases; 


Limit 

t -►  oo 


Limi  t 

X,  <X> 


w . 


This  means  that  after  a long  sequence  of  random  inputs,  the  probability 
of  any  given  state  is  fixed  and  independent  of  the  initial  state.  So, 
one  can  say  that  any  long  sequence  of  random  inputs  is  a probabilistic 
synchronizing  sequence  in  the  sense  that  the  final  probabilistic  state 
is  independent  of  the  initial  state. 

The  necessary  number  of  random  input  needed  to  achieve  proper  proba- 

— ► 

bilistic  synchronization  (^S  is  different  from  w by  less  than  e)  is 
directly  dependent  upon  the  eigenvalues  of  the  matrix  N.  Any  power  of 
the  matrix  N can  be  written  as 


N 


where  the  X.j's  are  the  eigenvalues  ot  N and  the  N^'s  matrices  are 
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independent  of  t . The  convergence  radius  of  (towards  w)  is  the 
eigenvalue  with  the  larger  absolute  value  (besides  the  eigenvalue.  ai=1, 
which  always  exists).  For  example,  a binary  counter  with  u stages 
(counting  from  0 to  2^  - 1)  will  reach  its  probabil isticly  synchronized 
state  w,  within  a precision  of  10*^,  after  a sequence  of  approximately 
.46  X X X 2^ ^ random  inputs  of  the  same  likelihood.  In  this  example,  the 
required  length  of  the  synchronizing  sequence  is  fairly  large  (around  1.3 
million  inputs  for  a 10-stage  counter  to  reach  the  steady  state  within 
.1%).  However,  this  is  a worst  case  example  and,  even  though,  the  time 
required  for  such  a probabilistic  synchronizing  sequence  will  be  less  than 
1 second  for  most  present-day  implementations. 

When  the  random  number  generator  is  reset  at  the  beginning  of  each 
new  test  experiment,  deterministic  synchronization  can  be  achieved  if 
the  sequence  of  random  inputs  contains  a subsequence  which  is  a deter- 
ministic synchronizing  sequence.  However,  if  the  length  of  the  deter- 
ministic synchronizing  sequence  is  substantial,  the  likelihood  that  it 
will  occur  in  a random  sequence  may  be  extremely  small.  For  example, 
if  the  shortest  synchronizing  is  100  inputs  long  and  the  machine  has  10 
input  variables,  it  may  require  as  many  as  10^°°  random  inputs  of  the 
same  likelihood  to  have  a significant  chance  to  achieve  deterministic 
synchronization  (cf..  Appendix  I).  So,  unless  synchronizing  sequences 
are  quite  short  (for  example,  when  there  are  reset  lines),  it  is  unlikely 
that  sequential  machines  are  deterministicly  synchronized  at  the  beginning 
of  the  statistic  gathering  (cf.  Figure  2). 


IV.  REJECTION  OF  FAULT-FREE  CIRCUITS 

Some  fault-free  circuits  may  not  pass  the  test  because  of  the 
randomness  of  the  test  sequence  and  its  finite  length.  In  the  following, 
we  will  assume  that  the  internal  states  constitute  the  outputs  (one  line 
for  each  state).  So,  the  signature  of  the  circuit  under  test,  is 


^2 


^.-1  T„+t 
t=l  0 


t = - 
S • N T 


■2  N^o 


s 

L°  t=i 


+t 


As  it  can  easily  be  seen,  the  signature  of  the  circuit  under  test 
approximates  w,  which  is  the  correct  signature.  The  matrix  N can  be 
written  as  : 

q 

N = ^ (orthogonal  decomposi  tion  ,A^  =1 , the 


and 


i=l 


n‘  . J X,.‘.  N, 
i=l 


X.  ordered  by  decreasing  magnitude) 


So,  the  difference  between  and  w is 


z - w = T 


T / q 

0^-2 

t=l  \i=2 


As  T^  is  fairly  large,  one  has  only  to  consider  the  terms  in  X2  (Xj  being 
1 is  cancelled  by  w).  So, 

T +1 

‘ n 

s • N2 


z - w 


1 

T 


X2  0 


1 -X2 
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The  second  factor  represents  the  accuracy  with  which  the  probabilistic 
synchronization  has  been  achieved.  As  it  is  clear  from  the  first  term, 
the  probability  of  rejecting  fault  free  units  is  extremely  low  (even  when 
probabilistic  synchronization  was  poorly  achieved)  if  the  eigenvalue  with 
higher  absolute  value,  A21  is  negative.  Figure  3 gives  the  dependency 
between  the  approximation  of  w by  z and  the  length  of  the  test. 
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second  step 


Difference  between  the  steady  state  W and  Its  approximation  z as  a 
function  of  the  test  length. 


V.  DETECTION  OF  FAILURES 


V.l  INHERENT  LIMITATIONS  OF  COMPACT  TESTING 

It  has  been  shown  by  [E.J.  McCluskey,  1975]  that  random  testing  can 
detect  any  failure  inside  a combinational  circuit,  if  the  input  proba- 
bilities are  correctly  chosen.  The  output  probability  becomes  the  fixed 
point  decimal  representation  of  the  truth  table  (expressed  as  a binary 
number).  So,  random  testing  can  be  used  to  identify  combinational  cir- 
cuits (even  though  it  is  highly  impractical).  However,  for  sequential 
circuits  such  a statement  is  false.  Whatever  the  input  probabilities, 
whatever  the  sequential  machine  under  test,  there  will  always  be  different 
machines  which  have  the  same  signature  (so  they  will  pass  the  test).  The 
proof  is  fairly  simple.  The  signature,  w,  of  a sequential  machine  is 
given  by  the  following  equation: 

w * M = W 

But  any  matrix  M'  obtained  from  M by  some  column  permutation  will 
have  the  same  signature.  So,  compact  testing  cannot  guarantee  that  it 
will  detect  all  the  possible  failures  (and  this  is  independent  of  the 
test  length).  However,  most  of  the  failures  that  do  occur  can  be  detected. 

V.2  FAILURES  IN  THE  OUTPUT  CIRCUITRY 

Most  of  the  sequential  machines  have  the  architecture  of  Figure  4. 

The  memory  elements  are  flip  flops.  They  are  controlled  by  a combinational 
circuit  synthetizing  the  exitation  functions  from  the  circuit  inputs  and 
the  flip-flop  outputs.  The  circuit  outputs  are  obtained  by  combinational 
logic.  Failures  can  occur  either  in  the  memory  elements  (flip  flops). 
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in  the  combinational  circuit  controlling  these  flip-flops  or  in  the 
combinational  logic  synthetizing  the  circuit  outputs.  For  simplicity 
of  this  study,  we  will  consider  these  three  cases  separately.  It  is 
quite  intuitive  that,  in  general,  multiple  failures  are  easier  to  detect 
{cumulative  effects). 

The  failures  that  are  restricted  to  the  combinational  logic  syn- 
thetizing the  circuit  outputs  from  the  inputs  and  the  flip-flop  outputs 
(Mealy-type  machines)  do  not  affect  the  state  transitions.  So,  this 
problem  is  analogous  to  the  problem  of  detecting  failures  in  combinational 
logic  (with  input  probabilities  determined  by  the  circuit  probabilistic  state). 

Failures  can  affect  the  validity  of  one  or  several  of  the  output 
variables.  It  is  obvious  that  the  failures  that  affect  several  output 
lines  are  easier  to  be  detected  (the  probabilities  of  ones  on  several 
output  lines  will  not  match  the  correct  values).  So,  one  can  get  a lower 
bound  for  detection  efficiency  by  looking  only  at  single  output  circuits. 

The  output,  Z,  is  a combinational  function  of  the  inputs  (A^. 's)  and  the 
states  (Q.'s).  When  the  circuit  is  fault-free,  the  output  probability 

s) 

is  z.  The  possible  faults  that  affect  the  output  circuitry  may  be  very 
varied  in  terms  of  their  effects.  A stuck-at  fault  directly  on  the  output 

A 

line  will  be  immediately  detected  (the  probability,  z,  of  the  faulty 
circuit  will  always  be  0 or  1).  In  general,  one  can  get  a very  conserva- 
tive model  for  the  faults  if  one  considers  that  on  the  average  a fault  will 
affect  only  a few  cells  of  the  truth  table  (output  as  a combinational 
function  of  the  inputs  and  states).  It  is  analogous  to  say  that  the 
output  will  be  valid  most  of  the  time  but  incorrect  for  a few  combina- 
tions of  input  variables  and  internal  states. 
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Under  this  assumption,  it  has  been  shown  by  [J.  Losq,  1976]  that  the 
distribution  of  the  output  probability,  z,  over  all  possible  faulty  cir- 
cuits is  a gaussian  distribution. 

Prob  e ^u  - u + ■ G^uss  (u,  z + A,  o^)  . du 

with  z = output  probability  of  the  correct  circuit, 

A = (l-2z)  • y, 

y = proportion  of  the  cells  in  the  truth  table  that  are 
affected  by  a fault  (characterizes  the  extend  of  a 
fail ure) , 

= variance  = y(l-y)  • (a  ' A ^ ’ (w  • w^*")  . 

The  fact  that  the  distribution  is  not  centered  around  the  correct  probability 
and  that  the  variance  is  quite  small  implies  that  most  of  the  failures  in 
output  circuitry  will  be  detected,  cf.  Figure  5 (the  difference  between 
z and  z is  very  likely  to  be  greater  than  the  acceptance  window  e) . So, 
one  can  state  that  compact  testing  is  efficient  to  detect  failures  located 
in  the  combinational  logic  synthesizing  the  outputs.  For  example,  in  the 
case  of  Figure  5,  more  than  99%  of  all  failures  will  be  detected, 

V . 3 FAILURES  IN  THE  MEMORY  ELEMENTS 

The  simplest  and  most  general  assumption  to  make  concerning  failures 
in  the  memory  elements  (flip-flops)  is  that  they  will  correspond  to  one 
of  the  flip-flops  being  stuck  (stuck-at  failure  at  the  flip-flop  output). 

When  the  output  of  a flip-flop  is  stuck,  half  the  states  are  unreachable. 

Half  the  columns  and  rows  of  the  transition  matrix  N'  will  be  zero. 
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Distribution  of  the  output  prol'ability , z,  for  the  faulty  circuits 


.002 


Fig.  5.  Distribution  of  the  output  probability,  z,  for  the  faulty  circuits 
(the  test  acceptance  window  is  shown  for  comnarison). 
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Consequently,  half  of  the  elements  of  the  steady-state  vector  w are  also 
zero.  If  the  internal  states  are  directly  observable  at  the  the  circuit 
output,  these  failures  will  be  immediately  detected.  The  signature  of  the 
faulty  circuit,  w , will  be  completely  different  from  the  signature  of 
the  correct  circuit,  w. 

Even  if  the  internal  states  are  not  directly  observable,  such  a 
failure  will  still  be  detected,  unless  the  machine  is  not  reduced  (for 
example,  if  each  one  of  the  unreachable  states  is  equivalent  to  the 
state  to  which  it  is  mapped  by  the  failure).  For  Moore-type  machines, 
the  output  variables,  Zj,  Z2,  ...,  Z^,  are  functions  of  the  states.  For 
each  output  variable,  Z j , one  can  write  the  truth  table  in  a vector 
form  so  that  the  output  probability,  , is  given  by; 

-► 

z . = w • C . 

J J 

The  condition  for  the  faulty  circuit  to  pass  the  test  is  that  its  signa- 
ture is  equal  to  the  reference  signature: 

w'  • Cj  = w • Cj  / j e jl  , 2,  . . . , mj. 

But  every  element  of  w'  is  different  from  the  corresponding  element  in  w 
(half  of  w'  is  zero).  So,  this  set  of  m equations  is  extremely  restric- 
tive on  the  values  of  w'  that  satisfy  it.  So,  one  can  say,  without  loss 
of  generality,  that  the  signature  of  the  faulty  circuit  will  differ  from 
the  reference  signature.  Mealy-type  machines  can  be  treated  similarly. 

So,  as  a general  statement,  it  is  safe  to  say  to  every  failure  that  af- 
fects the  memory  elements  will  be  detected  by  compact  testing. 


V.4  FAILURES  IN  THE  COMBINATIONAL  LOGIC  CONTROLLING  THE  MEMORY  ELEMENTS 


Failures  that  take  place  in  the  combinational  logic  that  synthetizes 
the  exitations  for  the  flip-flops  affect  the  state  transition  diagram  of 
the  circuits.  Failures  are  quite  diverse.  A stuck-at  constant  value  on 
the  R input  of  an  R-S  flip-flop  may  be  analogous  to  a flip-flop  failure. 

On  the  other  hand,  some  failures  may  change  only  a few  transitions  in  the 
transition  diagram  (for  example,  a failure  may  change  only  the  transition 
between  states  Q.  to  Q.  under  input  A. ).  These  last  ones  will  be  the 

1 J K 

most  difficult  to  detect  because  their  effects  on  the  system  operation 
is  somewhat  limited  (in  a statistical  sense).  So,  as  it  was  done  for  the 
output  combinational  logic,  we  will  only  consider  these  failures  in  the 
analysis.  This  will  provide  a meaningful  lower  bound  for  detection 
efficiency. 

Each  of  the  flip-flops  that  compose  the  circuit  memory  has  its  own 
exitation  synthetized  by  combinational  logic.  It  is  natural  to  assume 
that  failures  will  affect  the  exitation  of  only  one  flip-flop.  It  is 
also  natural  to  use  the  same  model  as  used  in  Section  V.2  to  describe 
the  effects  of  falures.  Each  failure  changes  only  a few  cells  in  the 
exitation  truth  table  (table  giving  the  flip-flop  exitation  as  a function 
of  the  circuit  inputs  and  internal  states).  The  cells  affected  are  ran- 
domly distributed  all  over  the  truth  table.  For  every  faulty  cell,  the 
corresponding  state  transition  (inputs  + state  ^ exitation  ->•  state  transi- 
tion) will  be  different  from  the  correct  one.  Reciprocally,  for  every 
correct  cell  in  the  exitation  table  both  the  faulty  and  the  fault-free 
machines  have  the  same  transition. 
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If  the  cell  corresponding  to  input  A.  and  state  Q.  is  faulty,  then 

K 1 

the  normal  transition  from  state  to  state  under  input  is  replaced 
by  a transition  to  state  Q ^ . The  corresponding  change,  AN,  in  the 
transition  matrix  N,  is 


i 


The  new  next  state  Q.,  is  dependent  of  Q..  If  Q.  corresponds  to  000. ..00 

J J J 

in  the  flip-flops  and  if  the  failure  affects  the  first  flip-flop,  then 
Qj  corresponds  to  100... 00. 

The  corresponding  change  in  w.  Aw,  is  expressed  as: 

Aw  • (I  - N - an)  = w • an 

If  w = [wi,  W2,  . . . , Wq] 

then  Aw  • (I  - N - AN)  = [o  ,0 , . . . ,0  ,-a|^- w^  ,0  , . . . ,0,a,^  w ^ , 0,...0] 

So,  there  will  always  be  a change  in  w.  Aw,  associated  with  such  a failure. 
This  change.  Aw,  is  the  basic  reason  why  compact  testing  can  detect  these 
fai 1 ures . 

In  general,  failures  in  the  logic  synthesizing  the  exitation 
functions  will  invalidate  several  cells  of  the  exitation  truth  table. 

The  change  in  w associated  with  each  faulty  cell  is  given  by  the  previous 
equation.  It  can  be  easily  seen  that  the  effects  of  several  faulty  cells 
is  cumulative  : 
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Aw  ( I - N - an ) = Aw  (I  - N ) - Aw  • an  =;  Aw  ( I - N ) 

So,  if  the  changes  on  N,  associated  with  the  v faulty  cells  are  respec- 
tively ANj,  AN2,  ....  AN^,  then 

V V 

Aw  (I  - N)  K ^ w • AN^.  = w ^ AN^ 
i=l  i=l 

If  the  number  of  faulty  cells  is  small  (compared  to  the  total  number  of 
cells  in  the  truth  table),  then  one  can  state  that  at  least  two  elements 
of  w will  be  changed  by  the  faults.  The  average  magnitude  of  this  change 
is 

n 

2-1  n 

Aw  ==  w . ^ a.2  = w • j j j^x.2  + (1  - x.)2 

i=0  i=l 

So,  the  relative  change  is  directly  dependent  upon  the  input  probabilities 
(the  characteristics  of  the  random  number  generator).  It  can  be  noted 
that  the  variation  in  w is  independent  of  the  function  realized  by  the 
circuit.  One  can  also  note  that  there  is  a trade-off  for  choosing  the 
set  of  input  probabilities  (the  x^'s).  Detection  of  failures  in  the 
output  circuitry  are  facilitated  when  the  x/s  are  close  to  .5(this  de- 
creases the  variance,  o^,  in  the  distribution  of  the  signature,  cf.  Section 
V.2).  On  the  other  hand,  detection  of  failures  in  the  exitation  cir- 
cuitry is  improved  if  the  x/s  are  far  from  .5. 

So,  most  of  the  failures  located  in  the  exitation  circuitry  can  be 
detected  by  compact  testing.  If  they  affect  very  significantly  one 
exitation  function,  then  they  tend  to  have  effects  similar  to  memory 
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failures,  and  thus,  they  will  be  easily  detected.  Even  when  their 
effects  are  very  limited,  they  will  produce  a change  in  the  steady-state 
of  the  circuit.  Such  a change  can  be  detected  if  the  test  is  long  enough. 
Figure  6 gives  the  minimum  test  length  required  to  detect  one  of  these 
very  subtle  failures.  It  should  also  be  noted  that  clock-related  failures 
will  be  detected  by  compact  testing  for  they  will  be  equivalent  to  memory 
failures  or  exitation  failures. 
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Fig.  6.  Minimum  number  of  test  inputs  to  achieve  detection  of  failures 


VI.  CONCLUSIONS 


Compact  testing  is  a very  simple  method  to  test  complicated 
circuitry.  Circuit  analysis  is  avoided.  Testing  equipment  is  extremely 
simple  and  can  be  used  with  almost  any  kind  of  circuit.  There  is  no 
need  for  large  libraries  of  test  sets  or  reference  output  sequences. 

This  is  obtained  at  the  cost  of  far  longer  test  sets.  However,  the 
speed  of  most  digital  circuits  nowadays  allows  several  million  inputs 
per  second.  So,  very  large  test  sets  (10®  inputs  and  higher)  are  not 
a penalty,  especially  when  they  are  random  (algorithmic  generation). 

It  has  been  previously  shown  that  random  testing  is  an  efficient 
method  to  test  combinational  circuits.  However,  the  problems  associated 
with  sequential  machines  can  make  one  doubt  its  usefulness  for 
sequential  machines  (even  though  it  is  practically  used  for  this  purpose). 
Here,  we  showed  that  the  problem  of  initial  state  can  be  simply  over- 
come. A long  sequence  of  random  inputs,  during  which  one  does  not  look 
at  the  circuit  outputs,  acts  as  a synchronizing  sequence  for  compact 
testing,  even  when  the  machine  does  not  possess  deterministic  synchronizing 
sequences.  The  probability  that  compact  testing  rejects  fault-free  cir- 
cuits can  be  made  arbitrarily  small  by  increasing  the  length  of  the  syn- 
chronization period.  For  most  practical  applications,  the  rate  of  re- 
jecting falut-free  circuits  is  negligible. 

Even  though  compact  testing  can  never  guarantee  one  hundred  percent 
confidence  in  its  results,  it  is  still  an  efficient  way  to  detect  most  of 
the  failures  that  can  occur  in  sequential  machines.  Failures  affecting 
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the  memory  elements  (or  the  delay  elements  in  the  feedback  loops)  are 
guaranteed  to  be  detected.  Similarly,  permanent  clock  failures  do  not 
escape  detection.  Failures  in  the  combinational  logic  synthesizing  the 
output  functions  from  the  circuit  inputs  and  its  states,  are  also  likely 
to  be  detected.  It  was  shown  that  the  corresponding  signature  differs 
I from  the  correct  one  by  a quantity  that  is  a random  variable  of  non-zero 

I mean  and  extremely  small  variance,  so,  the  efficiency  to  detect  these 

( failures  is  a monotonical ly  increasing  function  of  the  test  length.  Most 

I of  the  failures  that  affect  the  exitation  of  the  flip-flops  (or  the  state 

I transitions)  can  also  be  detected.  Depending  on  the  extent  with  which  they 

1 

f affect  the  operation  of  the  circuit,  the  change  they  induce  on  the  circuit 

I signature  is  more  or  less  accentuated.  Failures  that  drastically  change 

i 

the  circuit  operation  are  extremely  likely  to  be  detected.  However,  even 
the  more  subtle  failures,  those  which  change  only  one  state  transition, 

; can  be  caught  by  the  test  if  it  is  long  enough. 

Because  of  the  similarity  between  compact  testing  and  random  test  set 
generation,  one  may  hope  that  the  efficiency  of  compact  testing  could  be 
enhanced  by  some  kind  of  interactive  use  (or  feedback  between  the  circuit 
signature  and  the  random  number  generation).  Investigation  of  this  pro- 
blem may  lead  to  a very  general  and  efficient  way  to  test  very  large 
digital  systems. 


APPENDIX  I 


This  is  a well  known  problem  whose  general  solution  is  extremely 
complex.  However,  for  our  purposes,  one  can  get  a simple  approximation. 
Let  us  assume:  all  the  letters  of  the  alphabet  (all  possible  inputs) 

have  the  same  likelihood  (with  probability  a = 2"^)  and 
the  given  subsequence  does  repeat  the  same  letter  (each 


letter  appears  at  most  once). 


Even  though  this  seems  to  be  a strong  assumption,  it  giv^s 
a good  approximation. 


With  these  assumptions,  we  can  model  the  process  as  a Markov  chain.  The 
state,  S.  (i  from  o to  l)  indicates  that,  while  the  random  sequence  is 
drawn,  the  last  i letters  correspond  to  the  first  i^  letters  of  the 
subsequence.  The  probability  transition  matrix,  M,  for  this  Markov  chain 
is 

■a  , a , 0 , . . . , 0 
-a , 0 , a , . . . , 0 

■a  ,0,0,  . . . , a 
0,  0,  0,  . . . , 1 

£.+1  £ £+1  £ 

The  characteristic  polynomial  is  ^ ^ - X - a + a 

X ” a 

One  of  the  eigenvalue  is  1 and  the  one  with  the  next  higher  absolute 


Prob  (to  be  in  state  Sj^  after  T inputs)  = Prob  (the  random 
sequence  contains  the  given  subsequence) 


= 1 - Exp  (-(1-a)  a^  T)  . 
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Bolling  Air  Force  Base,  DC  20332 
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Naval  Postgraduate  School 
Monterey,  CA  93940 

Naval  Air  Development  Center 
Attn;  Code  01,  Dr.  R.  K.  Lobb 
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New  York,  NY  10003 


( 


5 


■>  ilJi  I III  .mill  I .11  1.^ 


Office  of  Naval  Research 
San  Francisco  Area  Office 
One  Hallidie  Plaza,  Suite  601 
San  Francisco,  CA  94102 
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Office  of  Naval  Research 
Branch  Office 
495  Summer  Street 
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Director 

Office  of  Naval  Research 
Branch  Office 
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Office  of  Research , Development 
Test  and  Evaluation 
NOP-987 

The  Pentagon , Room  5D760 
Washington,  D.C.  20350 
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Mr.  J.  C.  French 
National  Bureau  of  Standards 
Electronics  Technology  Division 
Washington,  D.C.  20234 

Dr.  Jay  Harris 

Program  Director 

Devices  and  Waves  Program 

National  Science  Foundation 

1800  G Street 

Washington,  D.C.  20550 
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P.  O.  Box  1663 
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Division  of  Materials  Research 
National  Science  Foundation 
1800  G Street 
Washington,  D.C.  20550 
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National  Aeronautics  and 
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National  Bureau  of  Standards 
Washington,  D.C.  20234 
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Cambridge , MA  02139 

Director 

Stanford  Electronics  laboratory 
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Stanford  University 
Stanford,  CA  94305 
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David  Taylor  Naval  Ship  Research 
and  Development  Center 
Bethesda , MD  20084 


7 


Dr.  Roy  F.  Potter 
3868  Talbot  Street 
San  Diego , CA  92106 


